Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft
File:                     m1bbbkurl01Zvy7tECKgLu49N64.mft (raw, json)
Hash identifier:          MPVCuQyQXFuT3ZFp55wRlF6PmZqYWUseG7gk/EqYCuA=
Subject key identifier:   31:0F:4E:43:58:19:59:3F:65:FA:D0:02:95:34:9A:A4:2F:C6:45:73
Authority key identifier: 9B:56:DB:6E:4B:AB:97:4D:59:BF:2E:ED:10:22:A0:2E:EE:3D:37:AE
Certificate issuer:       /CN=9b56db6e4bab974d59bf2eed1022a02eee3d37ae
Certificate serial:       01A10436CE49ECBF2C95E045EA63ED1A8411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1bbbkurl01Zvy7tECKgLu49N64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft
Manifest number:          0100
Signing time:             Sun 04 Oct 2026 00:01:02 +0000
Manifest this update:     Sun 04 Oct 2026 00:01:02 +0000
Manifest next update:     Mon 05 Oct 2026 00:01:02 +0000
Files and hashes:         1: MhgYeI3nHsQ7EnEqBs3ix3URXK4.asa (hash: OMQ4Jfqr1uKSBnWc8VFQoJ2KmKvXwz+ZT7n6PnlnJ/k=)
                          2: m1bbbkurl01Zvy7tECKgLu49N64.crl (hash: hWOzC62rUrhPwdqEAXCmzJ6CDP8gdUqq5cMtInrnQY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1bbbkurl01Zvy7tECKgLu49N64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:36:ce:49:ec:bf:2c:95:e0:45:ea:63:ed:1a:84:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b56db6e4bab974d59bf2eed1022a02eee3d37ae
        Validity
            Not Before: Oct  4 00:01:02 2026 GMT
            Not After : Oct  5 00:01:02 2026 GMT
        Subject: CN=310f4e435819593f65fad00295349aa42fc64573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:8d:db:92:54:a9:32:1f:21:24:1c:aa:22:f6:
                    2e:1c:af:90:6f:34:0e:49:fd:65:cb:31:63:5e:f2:
                    f6:ff:d6:d6:9f:86:25:97:ef:b2:48:9b:f7:22:75:
                    54:48:45:9e:d1:44:34:59:7b:ed:99:85:3a:ea:96:
                    e6:f4:38:d5:76:58:0c:4f:7d:71:c9:d3:df:e9:51:
                    a8:b2:8e:60:5c:1c:d4:b0:eb:7c:55:1e:74:b7:7e:
                    fe:01:aa:9b:9e:9e:41:31:b9:60:53:8b:ca:ae:9c:
                    0e:7f:89:d0:a8:71:85:19:e3:38:c2:2a:e4:b0:56:
                    1a:6e:6a:ca:ad:ef:36:a8:9b:66:80:d3:7e:14:fc:
                    17:9a:28:6c:89:22:07:77:e5:9a:6f:17:14:24:dd:
                    d8:45:f0:40:c3:ea:e2:32:21:b6:d3:49:6c:d2:09:
                    c1:84:dd:a8:68:df:97:3b:6d:7b:c2:21:d3:2c:af:
                    95:33:3a:d3:b1:b4:87:ff:c3:2c:83:97:37:7d:91:
                    d3:0c:09:3b:25:b7:0a:bf:4d:ca:70:ec:6f:89:f6:
                    b5:3b:5e:35:42:6f:00:4e:c8:bf:c7:35:53:4a:0e:
                    fe:09:69:23:e5:a0:50:a6:d4:a1:af:72:a4:5d:17:
                    4f:10:df:71:46:85:2c:c0:bf:1c:13:7e:95:83:e2:
                    a0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0F:4E:43:58:19:59:3F:65:FA:D0:02:95:34:9A:A4:2F:C6:45:73
            X509v3 Authority Key Identifier:
                keyid:9B:56:DB:6E:4B:AB:97:4D:59:BF:2E:ED:10:22:A0:2E:EE:3D:37:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1bbbkurl01Zvy7tECKgLu49N64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/m1bbbkurl01Zvy7tECKgLu49N64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:77:a5:12:46:96:73:3d:ae:d1:12:97:29:9f:86:c1:4e:f7:
         3d:c3:ca:83:25:c5:7d:f4:b2:bf:13:50:a4:c5:de:ec:17:a0:
         47:0c:73:74:e6:d6:f6:08:b8:fc:80:4b:85:0f:69:bc:73:17:
         c5:00:2f:33:d9:35:5e:a8:34:a1:16:58:fb:d7:64:8b:76:f7:
         cc:7f:c4:c8:a4:89:72:84:27:52:1c:c2:ef:8d:cb:c1:9e:70:
         d7:e8:c9:f5:bd:ee:f9:27:0d:7d:b1:86:b2:a0:f9:03:10:ff:
         e6:0c:81:03:47:6a:eb:7f:90:8d:7b:72:ae:13:d0:ad:10:e4:
         c4:33:3c:4f:08:05:43:9a:c1:2d:2d:a8:68:80:5c:0f:fb:b5:
         59:34:1e:c7:50:79:9d:0d:f3:cd:35:55:8f:26:d8:7e:79:3b:
         44:34:e6:eb:c2:7a:0e:6e:43:fa:88:22:f5:af:4b:7e:ad:46:
         9b:22:d8:3a:29:4f:27:8f:fb:fc:b9:73:fc:f3:a7:89:8a:21:
         64:b2:64:98:5f:81:04:6c:77:a4:e3:00:37:2e:31:aa:5d:2d:
         6e:56:01:7d:be:ef:6f:6b:78:20:0f:03:31:a7:0d:66:37:ae:
         92:e2:1a:57:fd:11:95:35:92:c8:7e:fc:06:54:48:6f:ff:9b:
         2c:02:6c:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEENs5J7L8sleBF6mPtGoQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTZkYjZlNGJhYjk3NGQ1OWJmMmVlZDEwMjJhMDJlZWUz
ZDM3YWUwHhcNMjYxMDA0MDAwMTAyWhcNMjYxMDA1MDAwMTAyWjAzMTEwLwYDVQQD
EygzMTBmNGU0MzU4MTk1OTNmNjVmYWQwMDI5NTM0OWFhNDJmYzY0NTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+43bklSpMh8hJByqIvYuHK+QbzQO
Sf1lyzFjXvL2/9bWn4Yll++ySJv3InVUSEWe0UQ0WXvtmYU66pbm9DjVdlgMT31x
ydPf6VGoso5gXBzUsOt8VR50t37+Aaqbnp5BMblgU4vKrpwOf4nQqHGFGeM4wirk
sFYabmrKre82qJtmgNN+FPwXmihsiSIHd+WabxcUJN3YRfBAw+riMiG200ls0gnB
hN2oaN+XO217wiHTLK+VMzrTsbSH/8Msg5c3fZHTDAk7JbcKv03KcOxvifa1O141
Qm8ATsi/xzVTSg7+CWkj5aBQptShr3KkXRdPEN9xRoUswL8cE36Vg+KgqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEPTkNYGVk/ZfrQApU0mqQvxkVzMB8GA1UdIwQY
MBaAFJtW225Lq5dNWb8u7RAioC7uPTeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFiYmJrdXJsMDFadnk3dEVDS2dMdTQ5TjY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lMzhmYzUtMTNhOS00OTA2LWI1NWUt
Nzk0NTNhZGZmMWJkLzEvbTFiYmJrdXJsMDFadnk3dEVDS2dMdTQ5TjY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lMzhmYzUtMTNhOS00OTA2LWI1NWUtNzk0NTNhZGZmMWJk
LzEvbTFiYmJrdXJsMDFadnk3dEVDS2dMdTQ5TjY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3elEkaW
cz2u0RKXKZ+GwU73PcPKgyXFffSyvxNQpMXe7BegRwxzdObW9gi4/IBLhQ9pvHMX
xQAvM9k1Xqg0oRZY+9dki3b3zH/EyKSJcoQnUhzC743LwZ5w1+jJ9b3u+ScNfbGG
sqD5AxD/5gyBA0dq63+QjXtyrhPQrRDkxDM8TwgFQ5rBLS2oaIBcD/u1WTQex1B5
nQ3zzTVVjybYfnk7RDTm68J6Dm5D+ogi9a9Lfq1GmyLYOilPJ4/7/Llz/POniYoh
ZLJkmF+BBGx3pOMANy4xql0tblYBfb7vb2t4IA8DMacNZjeukuIaV/0RlTWSyH78
BlRIb/+bLAJsfg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 06:39:32 2026 by rpki-client